CVE-2026-31743

Analyzed Analyzed - Analysis Complete

Buffer Overflow in Linux Kernel NVMEM Driver

Publication date: 2026-05-01

Last updated on: 2026-05-07

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy Buffer size used in dma allocation and memcpy is wrong. It can lead to undersized DMA buffer access and possible memory corruption. use correct buffer size in dma_alloc_coherent and memcpy.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-01

Last Modified

2026-05-07

Generated

2026-07-06

AI Q&A

2026-05-01

EPSS Evaluated

2026-07-05

NVD

CVE-2026-31743

EUVD

EUVD-2026-26556

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	From 6.13 (inc) to 6.18.22 (exc)
linux	linux_kernel	From 6.19 (inc) to 6.19.12 (exc)
linux	linux_kernel	From 6.9 (inc) to 6.12.81 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's nvmem subsystem, specifically in the zynqmp_nvmem component. The issue is that the buffer size used during DMA (Direct Memory Access) allocation and memcpy operations is incorrect. This incorrect buffer size can cause undersized DMA buffer access, which may lead to memory corruption.

Impact Analysis

The impact of this vulnerability is potential memory corruption due to undersized DMA buffer access. Memory corruption can cause system instability, crashes, or unpredictable behavior, which may affect the reliability and security of systems running the affected Linux kernel.

Mitigation Strategies

The vulnerability involves incorrect buffer size usage in dma_alloc_coherent and memcpy in the Linux kernel's nvmem zynqmp_nvmem driver, which can lead to memory corruption.

To mitigate this vulnerability, you should update your Linux kernel to a version where this issue has been fixed.

Hi! I’m here to help you understand CVE-2026-31743. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70